MQSeries.net :: View topic

PeterPotkay · Posted: Tue Oct 12, 2010 6:43 am Post subject: WMB 7 Toolkit Security Question

I will populate the MCAUSER ID field of the SVRCONN channel to be used by developers to connect to the Broker to deploy and start and stop their flows in the test environments. They will have a separate channel from the one the WMB Admins will be using. I do not want to leave the MCAUSER field blank as that would allow administrative control of the Queue Manager or the Broker. The people that can connect to that channel will be restricted via a Security Exit.

The Brokers will be running on Linux, the Toolkits will be running on users' Windows desktops.

A. Does WMB 7 record in its Broker logs what Toolkit users are asking it do do?

B. If two or more people are connected to the Broker over that one channel from their Toolkits at the same time, will there be any record of who did what in the Broker logs? Or will all the users be seen as the ID that is in the MCAUSER field of the channel used by the Toolkits and if anything is recorded, it will all be seen as the MCAUSER value and not the actual Toolkit user?

I know I can give each user their own Security Exit protected channel and populate each MCAUSER with a unique ID, but I'm hoping to avoid having to create and manage all those channels, not that its THAT big a deal.
_________________
Peter Potkay
Keep Calm and MQ On